emdash 0.12.0 → 0.13.0

package/dist/{index-Dlkzhb4C.d.mts → index-UmOMt9T-.d.mts}

@@ -1,17 +1,18 @@
-import { _ as MediaValue, m as MediaProviderDescriptor } from "./placeholder-CDPtkelt.mjs";
-import { t as Database } from "./types-BQx6ZXpR.mjs";
-import { a as ContentSeoInput, c as FindManyOptions, d as UpdateContentInput, l as FindManyResult, o as CreateContentInput, r as ContentItem, t as BylineSummary } from "./types-B_CXXnzh.mjs";
-import { $ as ResolvedPlugin, A as PageFragmentContribution, D as MediaItem$1, G as PluginManifest, N as PageMetadataContribution, P as PageMetadataEvent, U as PluginDefinition, Z as RequestMeta, c as CommentBeforeCreateEvent, g as CronEvent, i as CommentAfterCreateEvent, it as StandardPluginDefinition, j as PageFragmentEvent, o as CommentAfterModerateEvent, q as PluginStorageConfig, y as EmailMessage } from "./types-DgSc9Rpc.mjs";
-import { a as Collection, b as UpdateFieldInput, c as CollectionWithFields, d as CreateFieldInput, h as FieldValidation, i as SiteSettings, p as Field, r as SiteSettingKey, u as CreateCollectionInput, y as UpdateCollectionInput } from "./types-B1gLSAH2.mjs";
-import { d as Storage } from "./types-C-aFbqmA.mjs";
-import { t as DatabaseDescriptor } from "./adapters-BktHA7EO.mjs";
+import { a as ContentSeoInput, c as FindManyOptions, d as UpdateContentInput, l as FindManyResult, o as CreateContentInput, r as ContentItem, t as BylineSummary } from "./types-CzvJd1ND.mjs";
+import { d as ContentListResponse, f as ContentResponse, h as ManifestResponse, u as ApiResult } from "./options-Cq64Wx0O.mjs";
+import { t as Database } from "./types-C1KKK4VP.mjs";
+import { G as MediaItem$1, J as PageFragmentContribution, M as EmailMessage, Q as PageMetadataEvent, S as CronEvent, Y as PageFragmentEvent, Z as PageMetadataContribution, _t as ResolvedPlugin, c as CommentBeforeCreateEvent, dt as PluginStorageConfig, ht as RequestMeta, i as CommentAfterCreateEvent, lt as PluginManifest, o as CommentAfterModerateEvent, st as PluginDefinition } from "./types-B05e2naf.mjs";
+import { d as FieldValidation, g as UpdateFieldInput, h as UpdateCollectionInput, i as CollectionWithFields, l as Field, o as CreateCollectionInput, s as CreateFieldInput, t as Collection } from "./types-BWhaSS7U.mjs";
+import { _ as MediaValue, m as MediaProviderDescriptor } from "./placeholder-D3cFCU9y.mjs";
+import { C as ContentBylineInput } from "./index-D2gvztOP.mjs";
+import { i as SiteSettings, r as SiteSettingKey } from "./types-DW1l0gCv.mjs";
+import { d as Storage } from "./types-DmxPPXGf.mjs";
+import { r as AuthProviderDescriptor, t as AuthDescriptor } from "./types-DFowNO60.mjs";
+import { t as DatabaseDescriptor } from "./adapters-9DybjTO6.mjs";
 import { Kysely } from "kysely";
 import { z } from "astro/zod";
 import { z as z$1 } from "zod";
-import { PortableTextBlock } from "@emdash-cms/gutenberg-to-portable-text";
-import { Readable } from "node:stream";
 import { LiveLoader } from "astro/loaders";
-import * as react from "react";
 
 //#region src/database/connection.d.ts
 interface DatabaseConfig {
@@ -370,12 +371,6 @@ interface PublicComment {
   replies?: PublicComment[];
 }
 //#endregion
-//#region src/database/repositories/byline.d.ts
-interface ContentBylineInput {
-  bylineId: string;
-  roleLabel?: string | null;
-}
-//#endregion
 //#region src/fields/types.d.ts
 /**
  * SQLite column types that map from field types
@@ -412,7 +407,7 @@ interface FieldUIHints {
 /**
  * Portable Text block structure
  */
-interface PortableTextBlock$2 {
+interface PortableTextBlock$1 {
   _type: string;
   _key: string;
   [key: string]: unknown;
@@ -465,88 +460,7 @@ declare function reference(collection: string, options?: {
  */
 declare function portableText(options?: {
   required?: boolean;
-}): FieldDefinition<PortableTextBlock$2[] | undefined>;
-//#endregion
-//#region src/api/types.d.ts
-/**
- * List response with cursor pagination
- */
-interface ListResponse<T> {
-  items: T[];
-  nextCursor?: string;
-}
-/**
- * Content API responses
- */
-interface ContentListResponse extends ListResponse<ContentItem> {}
-interface ContentResponse {
-  item: ContentItem;
-  /** Opaque revision token for optimistic concurrency */
-  _rev?: string;
-}
-/**
- * Manifest API response
- */
-interface ManifestResponse {
-  version: string;
-  hash: string;
-  collections: Record<string, {
-    label: string;
-    labelSingular: string;
-    supports: string[];
-    fields: Record<string, FieldDescriptor>;
-  }>;
-  plugins: Record<string, {
-    adminPages?: Array<{
-      path: string;
-      component: string;
-    }>;
-    widgets?: string[];
-  }>;
-}
-interface FieldDescriptor {
-  kind: string;
-  label?: string;
-  required?: boolean;
-  /**
-   * For `select` / `multiSelect`: the list of enum choices.
-   * For `json` fields driven by a plugin `widget`: arbitrary widget config.
-   */
-  options?: Array<{
-    value: string;
-    label: string;
-  }> | Record<string, unknown>;
-}
-/**
- * Discriminated union for handler results.
- *
- * Handlers return `ApiResult<T>` -- either `{ success: true, data: T }` or
- * `{ success: false, error: { code, message } }`. The `success` literal
- * enables TypeScript narrowing on `.data`.
- *
- * The generic `E` parameter defaults to `ErrorCode` but can be narrowed to
- * `OAuthErrorCode` for OAuth token-endpoint handlers.
- *
- * Use `unwrapResult()` from `error.ts` to convert to an HTTP Response.
- */
-type ApiResult<T, E extends string = string> = {
-  success: true;
-  data: T;
-} | {
-  success: false;
-  error: {
-    code: E;
-    message: string;
-    details?: Record<string, unknown>;
-  };
-};
-/**
- * API request context
- */
-interface ApiContext {
-  userId?: string;
-  userRole?: string;
-}
+}): FieldDefinition<PortableTextBlock$1[] | undefined>;
 //#endregion
 //#region src/api/handlers/content.d.ts
 /**
@@ -1032,7 +946,7 @@ interface Section {
   title: string;
   description?: string;
   keywords: string[];
-  content: PortableTextBlock$2[];
+  content: PortableTextBlock$1[];
   previewUrl?: string;
   source: SectionSource;
   themeId?: string;
@@ -1047,7 +961,7 @@ interface CreateSectionInput {
   title: string;
   description?: string;
   keywords?: string[];
-  content: PortableTextBlock$2[];
+  content: PortableTextBlock$1[];
   previewMediaId?: string;
   source?: SectionSource;
   themeId?: string;
@@ -1060,7 +974,7 @@ interface UpdateSectionInput {
   title?: string;
   description?: string;
   keywords?: string[];
-  content?: PortableTextBlock$2[];
+  content?: PortableTextBlock$1[];
   previewMediaId?: string | null;
 }
 /**
@@ -1171,10 +1085,13 @@ interface SandboxOptions {
   emailSend?: SandboxEmailSendCallback;
 }
 /**
- * A sandboxed plugin instance.
- * Provides methods to invoke hooks and routes in the isolated environment.
+ * Handle to a sandboxed plugin running inside an isolate. Returned
+ * by `SandboxRunner.load` and held by the runtime's cache so hooks /
+ * routes can be invoked across the isolate boundary. Distinct from
+ * the author-facing `SandboxedPlugin` type in `emdash/plugin`, which
+ * describes the source-level shape of a plugin's default export.
  */
-interface SandboxedPlugin {
+interface SandboxedPluginInstance {
   /** Unique identifier: `${manifest.id}:${manifest.version}` */
   readonly id: string;
   /**
@@ -1229,7 +1146,7 @@ interface SandboxRunner {
    * @returns A sandboxed plugin instance
    * @throws If sandboxing is not available or plugin can't be loaded
    */
-  load(manifest: PluginManifest, code: string): Promise<SandboxedPlugin>;
+  load(manifest: PluginManifest, code: string): Promise<SandboxedPluginInstance>;
   /**
    * Set the email send callback for sandboxed plugins.
    * Called after the EmailPipeline is created, since the pipeline
@@ -1256,6 +1173,208 @@ interface SandboxRunner {
  */
 type SandboxRunnerFactory = (options: SandboxOptions) => SandboxRunner;
 //#endregion
+//#region src/registry/types.d.ts
+/**
+ * Public types for the experimental plugin registry.
+ *
+ * Kept in their own module so they don't get re-bundled into the
+ * `astro/integration/runtime.ts` chunk's dist output. tsdown / rolldown
+ * are sensitive to which top-level types live alongside `definePlugin`'s
+ * overloads, and pulling these types into the integration module
+ * affected downstream `definePlugin()` overload resolution for trusted
+ * plugins built against core's dist (see commit history for the
+ * detailed write-up).
+ */
+/**
+ * Experimental plugin registry configuration.
+ *
+ * See {@link ExperimentalConfig.registry}.
+ */
+interface RegistryConfig {
+  /**
+   * Base URL of the registry aggregator (an atproto AppView that indexes
+   * the firehose for `pm.fair.package.*` and `com.emdashcms.*` records).
+   *
+   * Must be the origin where the aggregator's XRPC endpoints are mounted,
+   * such that `${aggregatorUrl}/xrpc/<nsid>` resolves to a valid endpoint.
+   *
+   * Must be HTTPS in production; `http://localhost` or `http://127.0.0.1`
+   * are accepted in dev.
+   */
+  aggregatorUrl: string;
+  /**
+   * Optional comma-separated list of labeller DIDs forwarded as the
+   * `atproto-accept-labelers` header on every aggregator request.
+   *
+   * Format follows the atproto convention:
+   * `did:plc:abc;redact, did:plc:def`
+   *
+   * When unset, the aggregator applies its operator-default labeller set
+   * (typically the EmDash publisher-verification labeller and any
+   * additional trusted labellers the aggregator operator configured).
+   */
+  acceptLabelers?: string;
+  /**
+   * Site-level policy applied to the latest-release selection filter.
+   *
+   * These filters operate over the signed records the aggregator returns;
+   * they are not protocol-level constraints. See the RFC's
+   * "Update Discovery and Takedowns" section for the integration point.
+   */
+  policy?: {
+    /**
+     * Hold back releases newer than this when computing the recommended
+     * install or update version. Mitigates "compromised publisher
+     * account pushes a malicious release of an established plugin" by
+     * giving the takedown labeller a detection window.
+     *
+     * Accepts a duration string (`"24h"`, `"48h"`, `"72h"`, `"7d"`) or a
+     * number of seconds.
+     *
+     * Currently applies uniformly to all releases. A future addition
+     * may exempt brand-new packages (those with no prior release
+     * history) so the holdback doesn't block first-time publishing,
+     * but that exemption is not implemented yet; use
+     * {@link minimumReleaseAgeExclude} to allowlist trusted publishers
+     * whose packages should install immediately.
+     *
+     * Defaults to `undefined` (no holdback). A future trust/moderation
+     * RFC will specify the recommended default.
+     */
+    minimumReleaseAge?: string | number;
+    /**
+     * Packages exempt from the {@link minimumReleaseAge} holdback. Use
+     * for publishers whose release tempo you've explicitly accepted --
+     * your own first-party plugins, a trusted partner, etc.
+     *
+     * Each entry is either:
+     *   - A bare publisher DID (e.g. `"did:plc:abc123"`) -- every
+     *     package from that publisher is exempt.
+     *   - A `<did>/<slug>` pair (e.g.
+     *     `"did:plc:abc123/hotfix-plugin"`) -- only that specific
+     *     package is exempt.
+     *
+     * Whole-publisher exemptions are the common case: trust is
+     * naturally a property of the publisher, not of each individual
+     * package. Per-package exemptions exist for cases where a publisher
+     * has one plugin you want fast-track installs for and others you'd
+     * rather hold back.
+     *
+     * Only DIDs are accepted -- not handles. Handles are mutable
+     * aggregator-supplied envelope data, and accepting them as a
+     * trust input would let a compromised aggregator bypass the
+     * holdback by claiming any handle for any package. DIDs are
+     * tied to the AT URI of the package record itself, so even a
+     * compromised aggregator cannot lie about which DID published
+     * a release.
+     *
+     * Mirrors pnpm's `minimumReleaseAgeExclude`.
+     *
+     * @example
+     * ```ts
+     * minimumReleaseAgeExclude: [
+     *   "did:plc:emdashfirstparty",     // every package from this publisher
+     *   "did:plc:abc123/hotfix-plugin", // just this one package
+     * ]
+     * ```
+     */
+    minimumReleaseAgeExclude?: readonly string[];
+  };
+}
+/**
+ * Shorthand: pass a bare aggregator URL string in place of a full
+ * `RegistryConfig` object when you don't need `acceptLabelers` or
+ * `policy`. The normalizer expands the string into
+ * `{ aggregatorUrl: <string> }` before any downstream code sees it.
+ *
+ * @example
+ * ```ts
+ * experimental: {
+ *   registry: "https://registry.emdashcms.com",
+ * }
+ * ```
+ *
+ * Equivalent to:
+ * ```ts
+ * experimental: {
+ *   registry: { aggregatorUrl: "https://registry.emdashcms.com" },
+ * }
+ * ```
+ */
+type RegistryConfigInput = string | RegistryConfig;
+/**
+ * Experimental EmDash features. See `EmDashConfig.experimental`.
+ *
+ * Each field is independently opt-in. Fields may be promoted out of
+ * `experimental` (becoming top-level `EmDashConfig` options) or removed
+ * in minor releases; check the changelog when upgrading.
+ */
+interface ExperimentalConfig {
+  /**
+   * Decentralized plugin registry.
+   *
+   * When set, replaces the centralized `marketplace` for the admin UI's
+   * browse and install flows. The registry is an atproto-backed
+   * federation: package metadata lives in each publisher's PDS and
+   * an aggregator (the `aggregatorUrl`) indexes the firehose and
+   * exposes read-only XRPC endpoints for discovery.
+   *
+   * See [RFC 0001](https://github.com/emdash-cms/emdash/pull/694) for
+   * the protocol design.
+   *
+   * **Trust model (v1, experimental).** Today EmDash trusts the
+   * configured aggregator with these claims, per package and per
+   * release:
+   *
+   *   - The publisher DID associated with a `(did, slug)` pair.
+   *   - The artifact `url`, the artifact `checksum`, and any mirror
+   *     URLs returned for a release.
+   *   - The published handle for a DID (used for display only;
+   *     EmDash separately verifies the DID->handle round-trip in the
+   *     admin UI before treating a handle as confirmed).
+   *
+   * What EmDash verifies independently before activating an
+   * installed plugin:
+   *
+   *   - The artifact bytes hash to the checksum the aggregator
+   *     returned (so a malicious mirror or in-transit tamper can't
+   *     swap the bundle).
+   *   - The bundle's `manifest.id` matches the requested slug, and
+   *     its `manifest.version` matches the release version (so an
+   *     attacker who controls the aggregator can't trick the
+   *     sandbox into addressing the wrong plugin id).
+   *   - The bundle's `manifest.capabilities` matches what the admin
+   *     acknowledged in the consent dialog (so a publisher can't
+   *     ship a bundle that requests more permissions than the
+   *     dialog displayed).
+   *
+   * What's NOT yet verified:
+   *
+   *   - Full MST proof / publisher signature on the release record.
+   *     A compromised aggregator can forge a release for any DID
+   *     and slug, and the install will succeed as long as the
+   *     bundle matches the (forged) checksum.
+   *   - Per-release replay / rollback: the aggregator chooses which
+   *     release version is "latest".
+   *
+   * **Recommendation.** Until full signature verification lands,
+   * point `aggregatorUrl` only at an aggregator you operate
+   * yourself or one you trust with the same level of authority as
+   * a centralized plugin source. The `policy.minimumReleaseAge` and
+   * `acceptLabelers` knobs partially mitigate by widening the
+   * detection window for takedowns, but they assume the labeller
+   * system is operating.
+   *
+   * Requires `sandboxRunner` to be configured -- registry plugins
+   * always run sandboxed.
+   *
+   * Accepts a bare URL string as shorthand for
+   * `{ aggregatorUrl: "..." }`. Use the full object form when you
+   * need `acceptLabelers` or `policy`.
+   */
+  registry?: RegistryConfigInput;
+}
+//#endregion
 //#region src/content/converters/types.d.ts
 /**
  * Portable Text Types
@@ -1342,7 +1461,7 @@ interface PortableTextUnknownBlock {
 /**
  * Any Portable Text block
  */
-type PortableTextBlock$1 = PortableTextTextBlock | PortableTextImageBlock | PortableTextCodeBlock | PortableTextUnknownBlock;
+type PortableTextBlock = PortableTextTextBlock | PortableTextImageBlock | PortableTextCodeBlock | PortableTextUnknownBlock;
 /**
  * ProseMirror JSON types (simplified for TipTap)
  */
@@ -1366,13 +1485,13 @@ interface ProseMirrorDocument {
 /**
  * Convert ProseMirror document to Portable Text
  */
-declare function prosemirrorToPortableText(doc: ProseMirrorDocument): PortableTextBlock$1[];
+declare function prosemirrorToPortableText(doc: ProseMirrorDocument): PortableTextBlock[];
 //#endregion
 //#region src/content/converters/portable-text-to-prosemirror.d.ts
 /**
  * Convert Portable Text to ProseMirror document
  */
-declare function portableTextToProsemirror(blocks: PortableTextBlock$1[]): ProseMirrorDocument;
+declare function portableTextToProsemirror(blocks: PortableTextBlock[]): ProseMirrorDocument;
 //#endregion
 //#region src/utils/hash.d.ts
 /**
@@ -1421,22 +1540,6 @@ declare function sanitizeHref(url: string | undefined | null): string;
  */
 declare function isSafeHref(url: string): boolean;
 //#endregion
-//#region src/utils/slugify.d.ts
-/**
- * Convert a string to a URL-friendly slug.
- *
- * Handles unicode by normalizing to NFD and stripping diacritics,
- * so "café" becomes "cafe", "naïve" becomes "naive", etc.
- */
-/**
- * Decode a URI-encoded slug parameter.
- *
- * Browsers percent-encode non-ASCII characters in URLs, so a slug like
- * "మేష-రాసి" arrives as "%e0%b0%ae%e0%b1%87%e0%b0%b7-%e0%b0%b0%e0%b0%be%e0%b0%b8%e0%b0%bf".
- * Call this on `Astro.params.slug` before using it in database lookups.
- */
-declare function decodeSlug(raw: string | undefined): string | undefined;
-//#endregion
 //#region src/visual-editing/editable.d.ts
 /**
  * Visual editing annotation system
@@ -1891,172 +1994,15 @@ declare function getDb(): Promise<Kysely<Database>>;
  */
 declare function emdashLoader(): LiveLoader<EntryData, EntryFilter, CollectionFilter>;
 //#endregion
-//#region src/cli/wxr/parser.d.ts
-/**
- * Parsed WordPress export data
- */
-interface WxrData {
-  /** Site metadata */
-  site: WxrSite;
-  /** Posts (including custom post types) */
-  posts: WxrPost[];
-  /** Media attachments */
-  attachments: WxrAttachment[];
-  /** Categories */
-  categories: WxrCategory[];
-  /** Tags */
-  tags: WxrTag[];
-  /** Authors */
-  authors: WxrAuthor[];
-  /** All taxonomy terms (including custom taxonomies and nav_menu) */
-  terms: WxrTerm[];
-  /** Parsed navigation menus */
-  navMenus: WxrNavMenu[];
-}
-interface WxrSite {
-  title?: string;
-  link?: string;
-  description?: string;
-  language?: string;
-  baseSiteUrl?: string;
-  baseBlogUrl?: string;
-}
-interface WxrPost {
-  id?: number;
-  title?: string;
-  link?: string;
-  pubDate?: string;
-  creator?: string;
-  guid?: string;
-  description?: string;
-  content?: string;
-  excerpt?: string;
-  postDate?: string;
-  postDateGmt?: string;
-  postModified?: string;
-  postModifiedGmt?: string;
-  commentStatus?: string;
-  pingStatus?: string;
-  status?: string;
-  postType?: string;
-  postName?: string;
-  postPassword?: string;
-  isSticky?: boolean;
-  /** Parent post ID for hierarchical content (pages) */
-  postParent?: number;
-  /** Menu order for sorting */
-  menuOrder?: number;
-  categories: string[];
-  tags: string[];
-  /** Custom taxonomy assignments beyond categories/tags */
-  customTaxonomies?: Map<string, string[]>;
-  meta: Map<string, string>;
-}
-interface WxrAttachment {
-  id?: number;
-  title?: string;
-  url?: string;
-  postDate?: string;
-  meta: Map<string, string>;
-}
-interface WxrCategory {
-  id?: number;
-  nicename?: string;
-  name?: string;
-  parent?: string;
-  description?: string;
-}
-interface WxrTag {
-  id?: number;
-  slug?: string;
-  name?: string;
-  description?: string;
-}
-/**
- * Generic taxonomy term (categories, tags, nav_menu, custom taxonomies)
- */
-interface WxrTerm {
-  id: number;
-  taxonomy: string;
-  slug: string;
-  name: string;
-  parent?: string;
-  description?: string;
-}
-/**
- * Navigation menu structure
- */
-interface WxrNavMenu {
-  id: number;
-  name: string;
-  label: string;
-  items: WxrNavMenuItem[];
-}
-/**
- * Navigation menu item
- */
-interface WxrNavMenuItem {
-  id: number;
-  menuId: number;
-  parentId?: number;
-  sortOrder: number;
-  type: "custom" | "post_type" | "taxonomy";
-  objectType?: string;
-  objectId?: number;
-  url?: string;
-  title: string;
-  target?: string;
-  classes?: string;
-}
-interface WxrAuthor {
-  id?: number;
-  login?: string;
-  email?: string;
-  displayName?: string;
-  firstName?: string;
-  lastName?: string;
-}
-/**
- * Parse a WordPress WXR export file
- */
-declare function parseWxr(stream: Readable): Promise<WxrData>;
-/**
- * Parse a WordPress WXR export from a string
- *
- * Uses the non-streaming SAX parser API for compatibility with
- * environments that don't have Node.js streams (e.g., Cloudflare Workers).
- */
-declare function parseWxrString(xml: string): Promise<WxrData>;
-//#endregion
 //#region src/plugins/define-plugin.d.ts
 /**
- * Define an EmDash plugin.
- *
- * **Standard format** -- the canonical format for plugins that work in both
- * trusted and sandboxed modes. No id/version -- those come from the descriptor.
- *
- * @example
- * ```typescript
- * import { definePlugin } from "emdash";
- *
- * export default definePlugin({
- *   hooks: {
- *     "content:afterSave": {
- *       handler: async (event, ctx) => {
- *         await ctx.kv.set("lastSave", Date.now());
- *       },
- *     },
- *   },
- *   routes: {
- *     status: {
- *       handler: async (routeCtx, ctx) => ({ ok: true }),
- *     },
- *   },
- * });
- * ```
+ * Define a native EmDash plugin.
  *
- * **Native format** -- for plugins that need React admin, direct DB access,
- * or other capabilities not available in the sandbox.
+ * Native plugins ship as regular npm modules, get installed via
+ * `pnpm add` + an `astro.config.mjs` edit, and run in the host
+ * process. They have full access to the runtime — capabilities are
+ * still enforced by `PluginContextFactory`, but there is no isolation
+ * boundary.
  *
  * @example
  * ```typescript
@@ -2081,203 +2027,15 @@ declare function parseWxrString(xml: string): Promise<WxrData>;
  *   }
  * });
  * ```
- */
-declare function definePlugin<TStorage extends PluginStorageConfig>(definition: PluginDefinition<TStorage>): ResolvedPlugin<TStorage>;
-declare function definePlugin(definition: StandardPluginDefinition): StandardPluginDefinition;
-//#endregion
-//#region src/auth/types.d.ts
-/**
- * Auth Provider Types
- *
- * Defines the interfaces for pluggable authentication providers.
- *
- * Two systems coexist:
- * - `AuthDescriptor` — transparent auth (Cloudflare Access) that authenticates
- *   every request via headers/cookies. No login UI needed.
- * - `AuthProviderDescriptor` — pluggable login methods (GitHub, Google,
- *   AT Protocol, etc.) that appear as options on the login page and setup
- *   wizard. Passkey is built-in; providers are additive.
- */
-/**
- * Result of authenticating a request via an external auth provider
- */
-interface AuthResult {
-  /** User's email address */
-  email: string;
-  /** User's display name */
-  name: string;
-  /** Resolved role level (e.g., 50 for Admin, 30 for Editor) */
-  role: number;
-  /** Provider-specific subject ID */
-  subject?: string;
-  /** Additional provider-specific data */
-  metadata?: Record<string, unknown>;
-}
-/**
- * Auth descriptor — transparent auth providers (e.g., Cloudflare Access).
- *
- * These authenticate every request via headers/cookies. No login UI needed.
- * The module's `authenticate()` function is called by middleware on each request.
- */
-interface AuthDescriptor {
-  /**
-   * Auth provider type identifier
-   * @example "cloudflare-access", "okta", "auth0"
-   */
-  type: string;
-  /**
-   * Module specifier to import at runtime
-   * The module must export an `authenticate` function.
-   * @example "@emdash-cms/cloudflare/auth"
-   */
-  entrypoint: string;
-  /**
-   * Provider-specific configuration (JSON-serializable)
-   */
-  config: unknown;
-}
-/**
- * Auth provider module interface
  *
- * Modules specified by AuthDescriptor.entrypoint must export
- * an `authenticate` function matching this signature.
+ * Sandboxed-format plugins do not use `definePlugin`. They
+ * default-export a bare `{ hooks?, routes? }` object with a
+ * `satisfies SandboxedPlugin` annotation from `emdash/plugin`. Calling
+ * `definePlugin` with an object that has no `id` throws at runtime
+ * (the type system already rejects it at compile time — this check is
+ * for callers that bypass typechecking).
  */
-interface AuthProviderModule {
-  /**
-   * Authenticate a request using the provider
-   *
-   * @param request - The incoming HTTP request
-   * @param config - Provider-specific configuration from AuthDescriptor
-   * @returns Authentication result if valid, throws if invalid
-   */
-  authenticate(request: Request, config: unknown): Promise<AuthResult>;
-}
-/**
- * Descriptor for a pluggable auth provider.
- *
- * Auth providers appear as login options on the login page and setup wizard.
- * They coexist with passkey (which is built-in) and with each other.
- * Any provider can be used to create the initial admin account.
- *
- * @example
- * ```ts
- * // astro.config.ts
- * import { atproto } from "@emdash-cms/auth-atproto";
- *
- * emdash({
- *   authProviders: [atproto(), github(), google()],
- * })
- * ```
- */
-interface AuthProviderDescriptor {
-  /** Unique provider ID (e.g., "github", "atproto") */
-  id: string;
-  /** Human-readable label for UI (e.g., "GitHub", "AT Protocol") */
-  label: string;
-  /** Provider-specific config (JSON-serializable) */
-  config?: unknown;
-  /**
-   * Module exporting React components for the admin UI.
-   * Statically imported at build time via virtual module.
-   *
-   * The module should export components matching `AuthProviderAdminExports`.
-   */
-  adminEntry?: string;
-  /**
-   * Astro route handlers this provider needs injected at build time.
-   * Used for login initiation, OAuth callbacks, well-known endpoints, etc.
-   */
-  routes?: AuthRouteDescriptor[];
-  /**
-   * URL prefixes/paths that should bypass auth middleware.
-   * Added to the public routes set so login/callback endpoints work
-   * for unauthenticated users.
-   */
-  publicRoutes?: string[];
-  /**
-   * Storage collections for persistent auth state (e.g., OAuth sessions).
-   * Same format as plugin storage — collections are stored in the shared
-   * `_plugin_storage` table namespaced under `auth:<providerId>`.
-   *
-   * Access via `getAuthProviderStorage()` from `emdash/api/route-utils`.
-   */
-  storage?: Record<string, {
-    indexes?: Array<string | string[]>;
-    uniqueIndexes?: Array<string | string[]>;
-  }>;
-}
-/**
- * A route that an auth provider needs injected into the Astro app.
- */
-interface AuthRouteDescriptor {
-  /** URL pattern (e.g., "/_emdash/api/auth/atproto/login") */
-  pattern: string;
-  /** Module specifier for the Astro route handler */
-  entrypoint: string;
-}
-/**
- * Expected exports from an auth provider's `adminEntry` module.
- *
- * All exports are optional. Providers export whichever components
- * make sense for their auth flow.
- */
-interface AuthProviderAdminExports {
-  /**
-   * Compact button for the login page (icon + label).
-   * Used for providers with a simple redirect flow (GitHub, Google).
-   * Rendered in the "Or continue with" section.
-   */
-  LoginButton?: react.ComponentType;
-  /**
-   * Full login form for providers that need custom input.
-   * Used for providers like AT Protocol that need a handle field.
-   * Rendered as an expandable section on the login page.
-   */
-  LoginForm?: react.ComponentType;
-  /**
-   * Setup wizard step for creating the admin account via this provider.
-   * When present, this provider appears as an option in the setup wizard's
-   * "Create admin account" step.
-   */
-  SetupStep?: react.ComponentType<{
-    onComplete: () => void;
-  }>;
-}
-/**
- * Configuration options common to external auth providers
- */
-interface ExternalAuthConfig {
-  /**
-   * Automatically create EmDash users on first login
-   * @default true
-   */
-  autoProvision?: boolean;
-  /**
-   * Role level for users not matching any group in roleMapping
-   * @default 30 (Editor)
-   */
-  defaultRole?: number;
-  /**
-   * Update user's role on each login based on current IdP groups
-   * When false, role is only set on first provisioning
-   * @default false
-   */
-  syncRoles?: boolean;
-  /**
-   * Map IdP group names to EmDash role levels
-   * First match wins if user is in multiple groups
-   *
-   * @example
-   * ```ts
-   * roleMapping: {
-   *   "Admins": 50,        // Admin
-   *   "Developers": 40,    // Developer
-   *   "Content Team": 30,  // Editor
-   * }
-   * ```
-   */
-  roleMapping?: Record<string, number>;
-}
+declare function definePlugin<TStorage extends PluginStorageConfig>(definition: PluginDefinition<TStorage>): ResolvedPlugin<TStorage>;
 //#endregion
 //#region src/astro/storage/types.d.ts
 /**
@@ -2560,6 +2318,10 @@ interface EmDashConfig {
    * Must be an HTTPS URL in production, or localhost/127.0.0.1 in dev.
    * Requires `sandboxRunner` to be configured (marketplace plugins run sandboxed).
    *
+   * When `registry` is also configured, the registry replaces the marketplace
+   * for the admin UI's browse and install flows. Existing marketplace-installed
+   * plugins continue to work; new installs and updates come from the registry.
+   *
    * @example
    * ```ts
    * emdash({
@@ -2569,6 +2331,27 @@ interface EmDashConfig {
    * ```
    */
   marketplace?: string;
+  /**
+   * Experimental features.
+   *
+   * These options are not yet stable. Shape, defaults, and behavior may
+   * change between minor versions. Use only if you're comfortable
+   * tracking the release notes and updating your config when an
+   * experimental feature graduates or changes.
+   *
+   * @example
+   * ```ts
+   * emdash({
+   *   experimental: {
+   *     registry: {
+   *       aggregatorUrl: "https://registry.emdashcms.com",
+   *     },
+   *   },
+   *   sandboxRunner: "@emdash-cms/sandbox-cloudflare",
+   * })
+   * ```
+   */
+  experimental?: ExperimentalConfig;
   /**
    * Maximum allowed media file upload size in bytes.
    *
@@ -2752,9 +2535,6 @@ interface EmDashConfig {
  * This is set by the virtual module at build time
  */
 declare function getStoredConfig(): EmDashConfig | null;
-declare global {
-  var __emdashConfig: EmDashConfig | undefined;
-} //# sourceMappingURL=runtime.d.ts.map
 //#endregion
 //#region src/plugins/manifest-schema.d.ts
 /**
@@ -2916,17 +2696,17 @@ declare const pluginManifestSchema: z$1.ZodObject<{
         string: "string";
         number: "number";
         boolean: "boolean";
+        slug: "slug";
         file: "file";
-        select: "select";
+        image: "image";
+        datetime: "datetime";
         text: "text";
         integer: "integer";
-        datetime: "datetime";
+        select: "select";
         multiSelect: "multiSelect";
         portableText: "portableText";
-        image: "image";
         reference: "reference";
         json: "json";
-        slug: "slug";
         repeater: "repeater";
       }>>;
       elements: z$1.ZodOptional<z$1.ZodArray<z$1.ZodObject<{
@@ -3628,7 +3408,7 @@ declare class NoopSandboxRunner implements SandboxRunner {
   /**
    * Always throws - can't load sandboxed plugins without isolation.
    */
-  load(_manifest: PluginManifest, _code: string): Promise<SandboxedPlugin>;
+  load(_manifest: PluginManifest, _code: string): Promise<SandboxedPluginInstance>;
   /**
    * No-op - sandboxing not available, email callback is irrelevant.
    */
@@ -3644,419 +3424,6 @@ declare class NoopSandboxRunner implements SandboxRunner {
  */
 declare function createNoopSandboxRunner(_options?: SandboxOptions): SandboxRunner;
 //#endregion
-//#region src/import/types.d.ts
-/** Author info from WordPress */
-interface WpAuthorInfo {
-  id?: number;
-  login?: string;
-  email?: string;
-  displayName?: string;
-  postCount: number;
-}
-/** File-based input (WXR upload) */
-interface FileInput {
-  type: "file";
-  file: File;
-}
-/** URL-based input (REST API probe) */
-interface UrlInput {
-  type: "url";
-  url: string;
-  /** Optional auth token for authenticated requests */
-  token?: string;
-}
-/** OAuth-based input (WordPress.com) */
-interface OAuthInput {
-  type: "oauth";
-  url: string;
-  accessToken: string;
-  /** Site ID for WordPress.com */
-  siteId?: string;
-}
-type SourceInput = FileInput | UrlInput | OAuthInput;
-/** Auth requirements for an import source */
-interface SourceAuth {
-  type: "oauth" | "token" | "password" | "none";
-  /** OAuth provider identifier */
-  provider?: string;
-  /** OAuth authorization URL */
-  oauthUrl?: string;
-  /** Human-readable instructions */
-  instructions?: string;
-}
-/** What the source can provide */
-interface SourceCapabilities {
-  /** Can fetch published content without auth */
-  publicContent: boolean;
-  /** Can fetch drafts/private (may need auth) */
-  privateContent: boolean;
-  /** Can fetch all custom post types */
-  customPostTypes: boolean;
-  /** Can fetch all meta fields */
-  allMeta: boolean;
-  /** Can stream media directly */
-  mediaStream: boolean;
-}
-/** Suggested next action after probe */
-type SuggestedAction = {
-  type: "proceed";
-} | {
-  type: "oauth";
-  url: string;
-  provider: string;
-} | {
-  type: "upload";
-  instructions: string;
-} | {
-  type: "install-plugin";
-  instructions: string;
-};
-/** Detected i18n/multilingual plugin info */
-interface I18nDetection {
-  /** Multilingual plugin name (e.g. "wpml", "polylang") */
-  plugin: string;
-  /** BCP 47 default locale */
-  defaultLocale: string;
-  /** All configured locales */
-  locales: string[];
-}
-/** Result of probing a URL for a specific source */
-interface SourceProbeResult {
-  /** Which source can handle this */
-  sourceId: string;
-  /** Confidence level */
-  confidence: "definite" | "likely" | "possible";
-  /** What we detected */
-  detected: {
-    platform: string;
-    version?: string;
-    siteTitle?: string;
-    siteUrl?: string;
-  };
-  /** What capabilities are available */
-  capabilities: SourceCapabilities;
-  /** What auth is needed, if any */
-  auth?: SourceAuth;
-  /** Suggested next step */
-  suggestedAction: SuggestedAction;
-  /** Preview data if available (e.g., post counts from REST API) */
-  preview?: {
-    posts?: number;
-    pages?: number;
-    media?: number;
-  };
-  /** Detected multilingual plugin. Absent when none detected. */
-  i18n?: I18nDetection;
-}
-/** Combined probe result from all sources */
-interface ProbeResult {
-  url: string;
-  isWordPress: boolean;
-  /** Best matching source (highest confidence) */
-  bestMatch: SourceProbeResult | null;
-  /** All matching sources */
-  allMatches: SourceProbeResult[];
-}
-/** Field definition for import */
-interface ImportFieldDef {
-  slug: string;
-  label: string;
-  type: string;
-  required: boolean;
-  searchable?: boolean;
-}
-/** Field compatibility with existing schema */
-type FieldCompatibility = "compatible" | "type_mismatch" | "missing";
-/** Schema status for a collection */
-interface CollectionSchemaStatus {
-  exists: boolean;
-  fieldStatus: Record<string, {
-    status: FieldCompatibility;
-    existingType?: string;
-    requiredType: string;
-  }>;
-  canImport: boolean;
-  reason?: string;
-}
-/** Analysis of a single post type */
-interface PostTypeAnalysis {
-  name: string;
-  count: number;
-  suggestedCollection: string;
-  requiredFields: ImportFieldDef[];
-  schemaStatus: CollectionSchemaStatus;
-}
-/** Attachment/media info */
-interface AttachmentInfo {
-  id?: number;
-  title?: string;
-  url?: string;
-  filename?: string;
-  mimeType?: string;
-  alt?: string;
-  caption?: string;
-  width?: number;
-  height?: number;
-}
-/** Navigation menu analysis */
-interface NavMenuAnalysis {
-  /** Menu name/slug */
-  name: string;
-  /** Menu display label */
-  label: string;
-  /** Number of items in this menu */
-  itemCount: number;
-}
-/** Custom taxonomy analysis */
-interface TaxonomyAnalysis {
-  /** Taxonomy slug (e.g., 'genre', 'portfolio_category') */
-  slug: string;
-  /** Number of terms in this taxonomy */
-  termCount: number;
-  /** Sample term names */
-  sampleTerms: string[];
-}
-/** Reusable block analysis (wp_block post type) */
-interface ReusableBlockAnalysis {
-  /** Original WP ID */
-  id: number;
-  /** Block title */
-  title: string;
-  /** Block slug */
-  slug: string;
-}
-/** Normalized analysis result - same format for all sources */
-interface ImportAnalysis {
-  /** Source that produced this analysis */
-  sourceId: string;
-  site: {
-    title: string;
-    url: string;
-  };
-  postTypes: PostTypeAnalysis[];
-  attachments: {
-    count: number;
-    items: AttachmentInfo[];
-  };
-  categories: number;
-  tags: number;
-  authors: WpAuthorInfo[];
-  /** Navigation menus found in the export */
-  navMenus?: NavMenuAnalysis[];
-  /** Custom taxonomies (beyond categories/tags) */
-  customTaxonomies?: TaxonomyAnalysis[];
-  /** Reusable blocks (wp_block post type) - will be imported as sections */
-  reusableBlocks?: ReusableBlockAnalysis[];
-  /** Source-specific custom fields analysis */
-  customFields?: Array<{
-    key: string;
-    count: number;
-    samples: string[];
-    suggestedField: string;
-    suggestedType: "string" | "number" | "boolean" | "date" | "json";
-    isInternal: boolean;
-  }>;
-  /** Detected multilingual plugin. Absent when none detected. */
-  i18n?: I18nDetection;
-}
-/** Normalized content item - produced by all sources */
-interface NormalizedItem {
-  /** Original ID from source */
-  sourceId: string | number;
-  /** WordPress post type */
-  postType: string;
-  /** Content status */
-  status: "publish" | "draft" | "pending" | "private" | "future";
-  /** URL slug */
-  slug: string;
-  /** Title */
-  title: string;
-  /** Content as Portable Text (already converted) */
-  content: PortableTextBlock[];
-  /** Excerpt/summary */
-  excerpt?: string;
-  /** Publication date */
-  date: Date;
-  /** Last modified date */
-  modified?: Date;
-  /** Author identifier */
-  author?: string;
-  /** Category slugs */
-  categories?: string[];
-  /** Tag slugs */
-  tags?: string[];
-  /** Custom meta fields */
-  meta?: Record<string, unknown>;
-  /** Featured image URL */
-  featuredImage?: string;
-  /** Parent post ID (for hierarchical content like pages) */
-  parentId?: string | number;
-  /** Menu order for sorting */
-  menuOrder?: number;
-  /** Custom taxonomy assignments beyond categories/tags */
-  customTaxonomies?: Record<string, string[]>;
-  /** BCP 47 locale code. When omitted, defaults to defaultLocale. */
-  locale?: string;
-  /**
-   * Source-side translation group ID (opaque string from the origin system).
-   * Items sharing the same translationGroup are linked as translations.
-   * Resolved to an EmDash translation_group ULID during execute.
-   */
-  translationGroup?: string;
-}
-/** Post type mapping configuration */
-interface PostTypeMapping {
-  enabled: boolean;
-  collection: string;
-}
-/** Import configuration */
-interface ImportConfig {
-  postTypeMappings: Record<string, PostTypeMapping>;
-  skipExisting?: boolean;
-}
-/** Options for fetching content */
-interface FetchOptions {
-  /** Post types to fetch */
-  postTypes: string[];
-  /** Whether to include drafts */
-  includeDrafts?: boolean;
-  /** Limit number of items (for testing) */
-  limit?: number;
-}
-/** Import result */
-interface ImportResult {
-  success: boolean;
-  imported: number;
-  skipped: number;
-  errors: Array<{
-    title: string;
-    error: string;
-  }>;
-  byCollection: Record<string, number>;
-}
-/**
- * An import source provides content from an external system.
- * All sources produce the same normalized analysis and content format.
- */
-interface ImportSource {
-  /** Unique identifier */
-  id: string;
-  /** Display name */
-  name: string;
-  /** Description for UI */
-  description: string;
-  /** Icon identifier */
-  icon: "upload" | "globe" | "wordpress" | "plug";
-  /** Whether this source requires a file upload */
-  requiresFile?: boolean;
-  /** Whether this source can probe URLs */
-  canProbe?: boolean;
-  /**
-   * Probe a URL to see if this source can handle it.
-   * Returns null if not applicable.
-   */
-  probe?(url: string): Promise<SourceProbeResult | null>;
-  /**
-   * Analyze content from this source.
-   * Returns normalized ImportAnalysis.
-   */
-  analyze(input: SourceInput, context: ImportContext): Promise<ImportAnalysis>;
-  /**
-   * Stream content items for import.
-   * Yields normalized content items.
-   */
-  fetchContent(input: SourceInput, options: FetchOptions): AsyncGenerator<NormalizedItem>;
-  /**
-   * Fetch a media item's data.
-   * Used for media import.
-   */
-  fetchMedia?(url: string, input: SourceInput): Promise<Blob>;
-}
-/** Context passed to import sources */
-interface ImportContext {
-  /** Database connection for schema checks */
-  db?: unknown;
-  /** Function to check existing collections */
-  getExistingCollections?: () => Promise<Map<string, {
-    slug: string;
-    fields: Map<string, {
-      type: string;
-    }>;
-  }>>;
-}
-//#endregion
-//#region src/import/sections.d.ts
-/**
- * Result of sections import operation
- */
-interface SectionsImportResult {
-  /** Number of sections created */
-  sectionsCreated: number;
-  /** Number of sections skipped (already exist) */
-  sectionsSkipped: number;
-  /** Errors encountered during import */
-  errors: Array<{
-    title: string;
-    error: string;
-  }>;
-}
-/**
- * Import reusable blocks (wp_block post type) from WXR as sections
- *
- * @param posts - All posts from WXR (will filter to wp_block)
- * @param db - Database connection
- * @returns Import result with counts
- */
-declare function importReusableBlocksAsSections(posts: WxrPost[], db: Kysely<Database>): Promise<SectionsImportResult>;
-//#endregion
-//#region src/import/registry.d.ts
-/**
- * Register an import source
- */
-declare function registerSource(source: ImportSource): void;
-/**
- * Get a source by ID
- */
-declare function getSource(id: string): ImportSource | undefined;
-/**
- * Get all registered sources
- */
-declare function getAllSources(): ImportSource[];
-/**
- * Get sources that can handle file uploads
- */
-declare function getFileSources(): ImportSource[];
-/**
- * Get sources that can probe URLs
- */
-declare function getUrlSources(): ImportSource[];
-/**
- * Probe a URL against all registered sources
- *
- * Returns probe results sorted by confidence (definite > likely > possible)
- */
-declare function probeUrl(url: string): Promise<ProbeResult>;
-/**
- * Clear all registered sources (useful for testing)
- */
-declare function clearSources(): void;
-//#endregion
-//#region src/import/sources/wxr.d.ts
-declare const wxrSource: ImportSource;
-/**
- * Parse a WXR date with the correct fallback chain:
- * 1. GMT date (always UTC, most reliable)
- * 2. pubDate (RFC 2822, includes timezone offset)
- * 3. Site-local date (MySQL datetime without timezone, imprecise but best available)
- *
- * Returns undefined when none of the inputs yield a valid date.
- * Callers that need a guaranteed Date should use `?? new Date()`.
- */
-declare function parseWxrDate(gmtDate: string | undefined, pubDate: string | undefined, localDate: string | undefined): Date | undefined;
-//#endregion
-//#region src/import/sources/wordpress-rest.d.ts
-declare const wordpressRestSource: ImportSource;
-//#endregion
 //#region src/preview/tokens.d.ts
 /**
  * Preview token generation and verification
@@ -4646,7 +4013,7 @@ interface Widget {
   id: string;
   type: WidgetType;
   title?: string;
-  content?: PortableTextBlock$2[];
+  content?: PortableTextBlock$1[];
   menuName?: string;
   componentId?: string;
   componentProps?: Record<string, unknown>;
@@ -4681,7 +4048,7 @@ interface CreateWidgetAreaInput {
 interface CreateWidgetInput {
   type: WidgetType;
   title?: string;
-  content?: PortableTextBlock$2[];
+  content?: PortableTextBlock$1[];
   menuName?: string;
   componentId?: string;
   componentProps?: Record<string, unknown>;
@@ -4863,6 +4230,32 @@ declare class FTSManager {
    * `deleted_at IS NULL`. This keeps soft-deleted content out of the
    * search index and ensures the FTS row count matches the non-deleted
    * content count (which `verifyAndRepairIndex` relies on).
+   *
+   * IMPORTANT: The FTS5 virtual table is created with `content='ec_<slug>'`
+   * which makes it an *external content* FTS5 table. For external-content
+   * tables, removing a row must use the documented `'delete'` command and
+   * supply the OLD column values explicitly, e.g.:
+   *
+   *     INSERT INTO fts(fts, rowid, col1, col2)
+   *     VALUES('delete', OLD.rowid, OLD.col1, OLD.col2);
+   *
+   * Using `DELETE FROM fts WHERE rowid = OLD.rowid` is the correct form
+   * for *contentless* tables but is unsafe for external-content tables:
+   * FTS5 then reads column values from the backing content table, which
+   * in an AFTER UPDATE trigger already holds the NEW values. The wrong
+   * tokens get removed and the inverted index drifts out of sync until
+   * SQLite raises `SQLITE_CORRUPT_VTAB` on the next mutation. See
+   * https://www.sqlite.org/fts5.html#external_content_tables.
+   *
+   * The UPDATE and DELETE triggers gate the `'delete'` on
+   * `OLD.deleted_at IS NULL` because the INSERT trigger never indexed
+   * rows that were already soft-deleted. Issuing `'delete'` for a rowid
+   * that was never inserted into the FTS index is itself a corruption
+   * trigger -- FTS5's `'delete'` is not a no-op on missing rowids and
+   * raises `SQLITE_CORRUPT_VTAB`. Affected paths include restore-from-
+   * trash (UPDATE where `OLD.deleted_at IS NOT NULL`), permanent-delete
+   * from trash (DELETE on a soft-deleted row), and any edit on a row
+   * that's currently in the trash.
    */
   private createTriggers;
   /**
@@ -4920,9 +4313,15 @@ declare class FTSManager {
     lastRebuilt?: string;
   } | null>;
   /**
-   * Verify FTS index integrity and rebuild if corrupted.
+   * Verify FTS index integrity and rebuild if drift is detected.
+   *
+   * Cheap belt-and-braces check, run lazily on the first search request
+   * per isolate. The expensive cases (corrupted indexes from pre-fix
+   * EmDash versions, broken legacy triggers) are handled at boot time by
+   * migration `039_fix_fts5_triggers`, not here. This routine sticks to:
    *
-   * Checks for row count mismatch between content table and FTS table.
+   *   1. FTS table missing while config says search is enabled -> rebuild.
+   *   2. Row count mismatch between content table and FTS docsize -> rebuild.
    *
    * Returns true if the index was rebuilt, false if it was healthy.
    */
@@ -5022,7 +4421,7 @@ declare function getSearchStats(db: Kysely<Database>): Promise<SearchStats>;
  * // Returns: "Hello World"
  * ```
  */
-declare function extractPlainText(blocks: PortableTextBlock$1[] | string | null | undefined): string;
+declare function extractPlainText(blocks: PortableTextBlock[] | string | null | undefined): string;
 /**
  * Extract searchable text from a content entry
  *
@@ -5034,5 +4433,5 @@ declare function extractPlainText(blocks: PortableTextBlock$1[] | string | null
  */
 declare function extractSearchableFields(entry: Record<string, unknown>, fields: string[]): Record<string, string>;
 //#endregion
-export { UpdateMenuInput as $, EntryResult as $n, handleMediaList as $r, SuggestedAction as $t, getEntriesByTerm as A, ListResponse as Ai, WxrData as An, ProseMirrorNode as Ar, probeUrl as At, TaxonomyTerm as B, PortableTextBlock$2 as Bi, getDb as Bn, CreateSectionInput as Br, ImportContext as Bt, ReorderWidgetsInput as C, handleContentUnpublish as Ci, AuthResult as Cn, PortableTextLinkMark as Cr, parseWxrDate as Ct, WidgetComponentDef as D, ContentListResponse as Di, WxrAttachment as Dn, PortableTextUnknownBlock as Dr, getFileSources as Dt, WidgetArea as E, ApiContext as Ei, definePlugin as En, PortableTextTextBlock as Er, getAllSources as Et, getTerm as F, image as Fi, parseWxrString as Fn, SandboxRunnerFactory as Fr, FetchOptions as Ft, getMenu as G, DatabaseConfig as Gi, WaitUntilFn as Gn, getCollectionInfo as Gr, OAuthInput as Gt, UpdateTermInput as H, MediaItem as Hi, getFallbackChain as Hn, Section as Hr, ImportResult as Ht, getTermsForEntries as I, FieldDefinition as Ii, CollectionFilter as In, SandboxedPlugin as Ir, FieldCompatibility as It, CreateMenuItemInput as J, CollectionFilter$1 as Jn, MediaListResponse as Jr, ProbeResult as Jt, getMenus as K, EmDashDatabaseError as Ki, after as Kn, SchemaError as Kr, PostTypeAnalysis as Kt, invalidateTermCache as L, FieldUIHints as Li, EntryData as Ln, SerializedRequest as Lr, FileInput as Lt, getTaxonomyDef as M, portableText as Mi, WxrSite as Mn, SandboxEmailSendCallback as Mr, importReusableBlocksAsSections as Mt, getTaxonomyDefs as N, reference as Ni, WxrTag as Nn, SandboxOptions as Nr, AttachmentInfo as Nt, WidgetType as O, ContentResponse as Oi, WxrAuthor as On, ProseMirrorDocument as Or, getSource as Ot, getTaxonomyTerms as P, file as Pi, parseWxr as Pn, SandboxRunner as Pr, CollectionSchemaStatus as Pt, ReorderMenuItemsInput as Q, EmDashCollections as Qn, handleMediaGet as Qr, SourceProbeResult as Qt, CreateTermInput as R, FileValue as Ri, EntryFilter as Rn, getSection as Rr, ImportAnalysis as Rt, PropDef as S, handleContentTranslations as Si, AuthProviderModule as Sn, PortableTextImageBlock as Sr, wordpressRestSource as St, Widget as T, handleContentUpdate as Ti, ExternalAuthConfig as Tn, PortableTextSpan as Tr, clearSources as Tt, getByline as U, MediaRepository as Ui, getI18nConfig as Un, SectionSource as Ur, ImportSource as Ut, TaxonomyTermRow as V, CreateMediaInput as Vi, I18nConfig as Vn, GetSectionsOptions as Vr, ImportFieldDef as Vt, getBylineBySlug as W, ContentRepository as Wi, isI18nEnabled as Wn, UpdateSectionInput as Wr, NormalizedItem as Wt, MenuItem as X, ContentEntry as Xn, handleMediaCreate as Xr, SourceCapabilities as Xt, Menu as Y, CollectionResult as Yn, MediaResponse as Yr, SourceAuth as Yt, MenuItemType as Z, EditFieldMeta as Zn, handleMediaDelete as Zr, SourceInput as Zt, getWidgetArea as _, handleContentListTrashed as _i, S3StorageConfig as _n, computeContentHash as _r, VerifyPreviewTokenOptions as _t, search as a, handleRevisionRestore as ai, createPluginManager as an, getEmDashCollection as ar, getPluginSetting as at, CreateWidgetAreaInput as b, handleContentRestore as bi, AuthProviderAdminExports as bn, prosemirrorToPortableText as br, parseContentId as bt, FTSManager as c, handleContentCountScheduled as ci, HookPipeline as cn, resolveEmDashPath as cr, getSiteSettings as ct, SearchOptions as d, handleContentDelete as di, ValidatedPluginManifest as dn, FieldAnnotation as dr, isPreviewRequest as dt, handleMediaUpdate as ei, UrlInput as en, InferCollectionData as er, UpdateMenuItemInput as et, SearchResponse as f, handleContentDiscardDraft as fi, pluginManifestSchema as fn, createEditable as fr, GetPreviewUrlOptions as ft, Suggestion as g, handleContentList as gi, LocalStorageConfig as gn, sanitizeHref as gr, PreviewTokenPayload as gt, SuggestOptions as h, handleContentGetIncludingTrashed as hi, getStoredConfig as hn, isSafeHref as hr, GeneratePreviewTokenOptions as ht, getSuggestions as i, handleRevisionList as ii, PluginManager as in, getEditMeta as ir, getComments as it, getEntryTerms as j, ManifestResponse as ji, WxrPost as jn, SandboxEmailMessage as jr, registerSource as jt, getAllTermsForEntries as k, FieldDescriptor as ki, WxrCategory as kn, ProseMirrorMark as kr, getUrlSources as kt, CollectionSearchOptions as l, handleContentCountTrashed as li, HookResult as ln, CMSAnnotation as lr, setSiteSettings as lt, SearchStats as m, handleContentGet as mi, PluginDescriptor as mn, decodeSlug as mr, getPreviewUrl as mt, extractSearchableFields as n, RevisionResponse as ni, SandboxNotAvailableError as nn, TranslationSummary as nr, GetCommentsResult as nt, searchCollection as o, generateManifest as oi, PluginRouteError as on, getEmDashEntry as or, getPluginSettings as ot, SearchResult as p, handleContentDuplicate as pi, EmDashConfig as pn, createNoop as pr, buildPreviewUrl as pt, CreateMenuInput as q, CacheHint as qn, SchemaRegistry as qr, PostTypeMapping as qt, getSearchStats as r, handleRevisionGet as ri, createNoopSandboxRunner as rn, TranslationsResult as rr, getCommentCount as rt, searchWithDb as s, handleContentCompare as si, EmailPipeline as sn, getTranslations as sr, getSiteSetting as st, extractPlainText as t, RevisionListResponse as ti, NoopSandboxRunner as tn, ResolvePathResult as tr, GetCommentsOptions as tt, SearchConfig as u, handleContentCreate as ui, createHookPipeline as un, EditProxy as ur, getPreviewToken as ut, getWidgetAreas as v, handleContentPermanentDelete as vi, StorageDescriptor as vn, hashString as vr, VerifyPreviewTokenResult as vt, UpdateWidgetInput as w, handleContentUnschedule as wi, AuthRouteDescriptor as wn, PortableTextMarkDef as wr, wxrSource as wt, CreateWidgetInput as x, handleContentSchedule as xi, AuthProviderDescriptor as xn, PortableTextCodeBlock as xr, verifyPreviewToken as xt, getWidgetComponents as y, handleContentPublish as yi, AuthDescriptor as yn, portableTextToProsemirror as yr, generatePreviewToken as yt, TaxonomyDef as z, ImageValue as zi, emdashLoader as zn, getSections as zr, ImportConfig as zt };
-//# sourceMappingURL=index-Dlkzhb4C.d.mts.map
+export { UpdateMenuInput as $, MediaResponse as $n, CollectionFilter$1 as $t, getEntriesByTerm as A, PortableTextTextBlock as An, portableText as Ar, HookResult as At, TaxonomyTerm as B, SandboxedPluginInstance as Bn, MediaItem as Br, definePlugin as Bt, ReorderWidgetsInput as C, portableTextToProsemirror as Cn, handleContentPublish as Cr, SandboxNotAvailableError as Ct, WidgetComponentDef as D, PortableTextLinkMark as Dn, handleContentUnpublish as Dr, PluginRouteError as Dt, WidgetArea as E, PortableTextImageBlock as En, handleContentTranslations as Er, createPluginManager as Et, getTerm as F, SandboxEmailMessage as Fn, FieldUIHints as Fr, PluginDescriptor as Ft, getMenu as G, GetSectionsOptions as Gn, getDb as Gt, UpdateTermInput as H, getSection as Hn, ContentRepository as Hr, EntryData as Ht, getTermsForEntries as I, SandboxEmailSendCallback as In, FileValue as Ir, getStoredConfig as It, CreateMenuItemInput as J, UpdateSectionInput as Jn, getI18nConfig as Jt, getMenus as K, Section as Kn, I18nConfig as Kt, invalidateTermCache as L, SandboxOptions as Ln, ImageValue as Lr, LocalStorageConfig as Lt, getTaxonomyDef as M, ProseMirrorDocument as Mn, file as Mr, ValidatedPluginManifest as Mt, getTaxonomyDefs as N, ProseMirrorMark as Nn, image as Nr, pluginManifestSchema as Nt, WidgetType as O, PortableTextMarkDef as On, handleContentUnschedule as Or, EmailPipeline as Ot, getTaxonomyTerms as P, ProseMirrorNode as Pn, FieldDefinition as Pr, EmDashConfig as Pt, ReorderMenuItemsInput as Q, MediaListResponse as Qn, CacheHint as Qt, CreateTermInput as R, SandboxRunner as Rn, PortableTextBlock$1 as Rr, S3StorageConfig as Rt, PropDef as S, hashString as Sn, handleContentPermanentDelete as Sr, NoopSandboxRunner as St, Widget as T, PortableTextCodeBlock as Tn, handleContentSchedule as Tr, PluginManager as Tt, getByline as U, getSections as Un, DatabaseConfig as Ur, EntryFilter as Ut, TaxonomyTermRow as V, SerializedRequest as Vn, MediaRepository as Vr, CollectionFilter as Vt, getBylineBySlug as W, CreateSectionInput as Wn, EmDashDatabaseError as Wr, emdashLoader as Wt, MenuItem as X, SchemaError as Xn, WaitUntilFn as Xt, Menu as Y, getCollectionInfo as Yn, isI18nEnabled as Yt, MenuItemType as Z, SchemaRegistry as Zn, after as Zt, getWidgetArea as _, createEditable as _n, handleContentDuplicate as _r, VerifyPreviewTokenOptions as _t, search as a, InferCollectionData as an, RevisionListResponse as ar, getPluginSetting as at, CreateWidgetAreaInput as b, sanitizeHref as bn, handleContentList as br, parseContentId as bt, FTSManager as c, TranslationsResult as cn, handleRevisionList as cr, getSiteSettings as ct, SearchOptions as d, getEmDashEntry as dn, handleContentCompare as dr, isPreviewRequest as dt, CollectionResult as en, handleMediaCreate as er, UpdateMenuItemInput as et, SearchResponse as f, getTranslations as fn, handleContentCountScheduled as fr, GetPreviewUrlOptions as ft, Suggestion as g, FieldAnnotation as gn, handleContentDiscardDraft as gr, PreviewTokenPayload as gt, SuggestOptions as h, EditProxy as hn, handleContentDelete as hr, GeneratePreviewTokenOptions as ht, getSuggestions as i, EntryResult as in, handleMediaUpdate as ir, getComments as it, getEntryTerms as j, PortableTextUnknownBlock as jn, reference as jr, createHookPipeline as jt, getAllTermsForEntries as k, PortableTextSpan as kn, handleContentUpdate as kr, HookPipeline as kt, CollectionSearchOptions as l, getEditMeta as ln, handleRevisionRestore as lr, setSiteSettings as lt, SearchStats as m, CMSAnnotation as mn, handleContentCreate as mr, getPreviewUrl as mt, extractSearchableFields as n, EditFieldMeta as nn, handleMediaGet as nr, GetCommentsResult as nt, searchCollection as o, ResolvePathResult as on, RevisionResponse as or, getPluginSettings as ot, SearchResult as p, resolveEmDashPath as pn, handleContentCountTrashed as pr, buildPreviewUrl as pt, CreateMenuInput as q, SectionSource as qn, getFallbackChain as qt, getSearchStats as r, EmDashCollections as rn, handleMediaList as rr, getCommentCount as rt, searchWithDb as s, TranslationSummary as sn, handleRevisionGet as sr, getSiteSetting as st, extractPlainText as t, ContentEntry as tn, handleMediaDelete as tr, GetCommentsOptions as tt, SearchConfig as u, getEmDashCollection as un, generateManifest as ur, getPreviewToken as ut, getWidgetAreas as v, createNoop as vn, handleContentGet as vr, VerifyPreviewTokenResult as vt, UpdateWidgetInput as w, prosemirrorToPortableText as wn, handleContentRestore as wr, createNoopSandboxRunner as wt, CreateWidgetInput as x, computeContentHash as xn, handleContentListTrashed as xr, verifyPreviewToken as xt, getWidgetComponents as y, isSafeHref as yn, handleContentGetIncludingTrashed as yr, generatePreviewToken as yt, TaxonomyDef as z, SandboxRunnerFactory as zn, CreateMediaInput as zr, StorageDescriptor as zt };
+//# sourceMappingURL=index-UmOMt9T-.d.mts.map